Rewterz Threat Update – Indian Hacker Group Claims To Defaced Gov NAVTTC eAcademy Subdomain

Severity

High

Analysis Summary

INDIAN CYBER MAFIA hacker group claims to deface Pakistan Gov NAVTTC eAcademy Subdomain, allegedly releasing their Database File as well. 

The National Vocational and Technical Training Commission (NAVTTC) is a regulatory body responsible for promoting and regulating vocational and technical education and training in Pakistan. It was established in 2005 under the Ministry of Federal Education and Professional Training.

The Indian Cyber Mafia is a group of cybercriminals who are believed to be based in India and engage in various cybercrime activities such as hacking and website defacement. The group is not a well-defined or organized entity and may comprise of individual hackers or small groups working together to carry out cyber attacks.

Recently, the group claimed to seize control of the subdomain of the NAVTTC website in their posts and uploaded a message saying, “We told u stop attacks on Indian sites.”

They also shared a 11.6 MB SQL file related to National and Technical Training Commission Of Pakistan Govt.

This group of individuals seems to be dedicated to exacting revenge against Pakistan. The group’s primary objectives might include damage to Pakistan’s infrastructure, reputational damage, and facilitating further malicious activities. 

The group created its secret chat group on 30 March 2023. Previously, they claimed to have targeted the Bangladesh Air Force’s official website in order to exact vengeance on Bangladeshi hackers.

It is important for government agencies and organizations to take proactive measures to secure their networks and systems against cyber threats. This can include implementing strong cybersecurity measures such as firewalls, encryption, and multi-factor authentication, regularly updating software and systems, and providing cybersecurity training for employees. It’s also important to have an incident response plan in place to quickly respond to and mitigate any cyber attacks that may occur.

Recommendations

• Keep software and systems up-to-date: Make sure that your website’s software, such as content management systems, web servers, and plugins, are updated with the latest security patches to prevent known vulnerabilities.
• Use strong passwords: Encourage users to use strong, complex passwords, and enforce password policies that require regular password changes and prohibit the use of easily guessable passwords.
• Implement access controls: Restrict access to sensitive parts of the website, such as the backend administration area, to only authorized users who have a legitimate need to access it.
• Regularly monitor website activity: Set up monitoring tools that can detect any unusual activity on the website, such as changes to files, modifications to the website’s appearance, or unauthorized access attempts.
• Backup website data regularly: Regularly backup website data to ensure that it can be quickly restored in the event of a successful attack.
• Implement Content Security Policy (CSP): A CSP can help to prevent cross-site scripting (XSS) attacks, which are a common way that attackers deface websites. CSP specifies which sources of content are allowed to be loaded by the browser, which helps to prevent the injection of malicious scripts.
• Use web application firewalls (WAF): A WAF can help to prevent attacks by filtering traffic and blocking malicious requests.
• Develop an incident response plan: Prepare a plan that outlines the steps to be taken in the event of a website defacement attack, including who should be notified, what actions should be taken to mitigate the attack, and how to restore the website to its original state.

Website defacement attacks can be prevented by implementing strong security measures, such as regularly updating software and security patches, using strong passwords, and limiting access to sensitive parts of the website. It is also important to monitor the website for any signs of unauthorized access or unusual activity. By implementing these remediations, website owners can reduce the likelihood of a website defacement attack and limit the damage if an attack does occur.

Impact

• Web Defacement
• Unauthorized Access